mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
ff73f99d43
Velero 1.15 builds kopia repository maintenance jobs from a Deployment called "velero" in its namespace. Ours was velero-helm, so every BackupRepository reported 'error to build maintenance job: Deployment.apps "velero" not found' and the repos on the NAS were never cleaned up, some not since March 2025. fullnameOverride renames the Deployment, Service, ServiceAccount and RBAC; the old velero-helm objects get deleted by hand since this app doesn't prune.
73 lines
2.3 KiB
YAML
73 lines
2.3 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: velero-helm
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
source:
|
|
chart: velero
|
|
repoURL: https://vmware-tanzu.github.io/helm-charts
|
|
targetRevision: 8.4.0
|
|
helm:
|
|
values: |
|
|
# Velero builds its repository maintenance jobs from a Deployment
|
|
# named "velero". Under the default name (velero-helm) every
|
|
# maintenance run failed and the kopia repos on the NAS were never
|
|
# cleaned up.
|
|
fullnameOverride: velero
|
|
# The CRD upgrade hook pulls docker.io/bitnami/kubectl, which Bitnami
|
|
# has removed, so every sync hangs on it. The CRDs only change with
|
|
# the chart version; turn this back on (with another kubectl image)
|
|
# when bumping targetRevision.
|
|
upgradeCRDs: false
|
|
initContainers:
|
|
- name: velero-plugin-for-aws
|
|
image: velero/velero-plugin-for-aws:v1.11.1
|
|
volumeMounts:
|
|
- mountPath: /target
|
|
name: plugins
|
|
configuration:
|
|
backupStorageLocation:
|
|
- name: default
|
|
bucket: velero-backups
|
|
provider: aws
|
|
config:
|
|
region: minio
|
|
s3ForcePathStyle: true
|
|
s3Url: http://192.168.1.99:9000
|
|
insecureSkipTLSVerify: "true"
|
|
volumeSnapshotLocation:
|
|
- name: default
|
|
provider: aws
|
|
config:
|
|
region: minio
|
|
features: EnableCSI
|
|
credentials:
|
|
# Use existing secret created by External Secrets Operator
|
|
# existingSecret: velero-minio-credentials
|
|
# extraEnvVars:
|
|
# AWS_SHARED_CREDENTIALS_FILE: /credentials/cloud
|
|
existingSecret: cloud-credentials
|
|
deployNodeAgent: true
|
|
nodeAgent:
|
|
containerSecurityContext:
|
|
privileged: true
|
|
# 512Mi got the server OOMKilled 314 times, including halfway
|
|
# through a backup of ~14.7k items.
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 2Gi
|
|
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: velero
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
automated:
|
|
selfHeal: true |